Exercise Body Monitor With Functions To Verify Individual Policy 
Holder and Wear Of The Same, and A Business Model For A Discounted 



Insurance Premium For Policy Holder Wearing The Same 




Field of the Invention 



This invention concerns an exercise monitor with the function 
of verifying a person's identity and the fact that the person is 
connected to the monitor, and a management system for insurance 
premiums which employs this monitor. The "function of verifying a 
person's identity" stated herein refers to determining whether this 
person is in fact a person previously specified. The "function of 
verifying the fact that this person is connected to the monitor" 
refers to determining whether the monitor is actually connected to 
the body of the specified person. The "management system for in- 
surance premiums" refers to a system by which prospective insurants 
whose verified exercise test results meet a given standard are of- 
fered reduced premiums or other favorable treatment. The aforesaid 
"given standard" is a standard which makes use of various data to 
determine whether the person is maintaining or improving his physi- 
cal and mental health; whether he is preventing illness from occur- 
ring; and whether he is promoting his own health. 



Background of the Invention 

In recent years premiums for medical insurance have risen 
steadily, with the employer ! s contribution becoming larger each 
year. For management, this uncontrollable increase in expenses 
poses a vexing problem. Many companies offer their employees 
health insurance through HMOs (Health Maintenance Organizations) or 
PPOs (Preferred Provider Organizations) , for which the employer as- 
sumes a portion of the premium. In this scheme the employee 
chooses a given medical plan, and from the moment he meets the re- 
quirements, he is insured as a member of whichever company group 
plan he has chosen. His medical expenses are then covered in ac- 
cordance with specified conditions. 

When a person applies to join a health insurance plan, the in- 
surance company will ask him whether he has any pre-existing condi- 
tions. By excluding applicants with an extraordinary medical his- 
tory, the insurance company can avoid having to pay excessive medi- 
cal expenses. 

However, the existing health insurance system ignores efforts 
by individuals to maintain their own health on a day-to-day basis. 
The only data that are considered in computing the insurance pre- 
mium are general criteria such as the prospective insured 1 s age and 
sex and data concerning that individual's past history. 
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Yet it is quite clear that the frequency of doctor visits or 
the frequency of being prescribed medication varies statistically 
between people who regularly exercise and make an effort to main- 
tain their physical and mental health and people who do not. In 
other words, an insured person who regularly exercises will incur 
fewer medical expenses, while a person who does not exercise will 
incur more. However, once an individual is insured, the effort 
which he puts into maintaining his health from day to day is not 
currently reflected in his actual insurance premium. If insured 
persons were sorted or classed so that their premium reflected how 
much effort they put into maintaining their own health, not only 
would the profits of insurance companies rise, but insureds' premi- 
ums would be lower. It is also believed that such a scheme would 
reduce the overall medical expenses of the entire society. 

One system which allows individuals 1 efforts to maintain their 
health to be reflected in their insurance premiums is the health 
target control system shown in Figure 17, which was recently pub- 
lished as Japanese Patent Publication 2000-276525. This invention 
concerns an insurance product by which an individual's life insur- 
ance premium is discounted according to how healthy he is. A per- 
son who has signed an insurance contract regularly enters his exer- 
cise data via input device 103 at a fitness center designated by 
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the insurance company. Processing unit 109 calculates the person's 
state of health using various files (not pictured) stored in memory 
device 102, including file 201, which manages the length of time 
the person has been studied; file 202, which contains the test re- 
sults that give the result of the study; file 203, which contains 
the person's health diagnosis; and file 204, which contains his ex- 
ercise record. Processing unit 110 calculates the discount rate 
for that individual's insurance premium, and based on this discount 
rate calculates his actual premium. It could happen that an in- 
sured, in order to receive the premium discount or other special 
treatment such as various free services, would get a friend to im- 
personate him and create a spurious exercise record file. However, 
the health target control system disclosed in Japanese Patent Pub- 
lication 2000-276525 gives no consideration to preventing another 
person from assuming the insured's identity and creating false data 
such as a spurious exercise record file. Since the aforesaid pre- 
mium discount or other favorable treatment is predicated on the in- 
sured's own effort to maintain his health, it is necessary to ver- 
ify that the person inputting the exercise record is actually the 
insured and not someone pretending to be the insured. To verify 
that the insured himself is actually exercising, we must verify 
both that this is the correct person and that he is exercising. 
Numerous techniques may be found in the public record to do the 
single job of verifying the person's identity. For example, in USP 



4, 528, 442 , applied for by the parent company of the current inven- 
tors, the person T s answers to a number of questions are compared 
with previously recorded answers given by the person himself to 
verify his identity. 

However, the current technique to verify identity does not as- 
sume the possibility that the person desires that someone imperson- 
ate him. For example, pedometers or other sports appliances widely 
used in fitness centers have the capability of calculating and dis- 
playing the amount of exercise a person has completed. An insur- 
ance company might trust the amount of exercise recorded by one of 
these exercise appliances and so discount his insurance premium. 
The problem here is that in the current system there is no alterna- 
tive but to accept the self-report from the insured as to how much 
he has exercised. The insurance company has no means to check the 
veracity of the self-report. If, for example, an insured records 
with a pedometer a specified number of steps, and is granted a pre- 
mium discount, the following problems must be considered. 

1) The insurance company has no way to check whether the in- 
sured actually wore the pedometer himself or some other person wore 
it. In other words, it cannot verify the identity of the person 
exercising. Generally, verifying identity has consisted simply of 
determining that a person is authorized. For example, it is con- 
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sidered a sufficient proof of identity if the person knows a spe- 
cific PIN number. For most purposes, it has not been necessary to 
check whether someone has given his PIN number to a friend who will 
input it pretending to be him. When the identity of the owner of a 
bank account is verified, the only question is whether the person 
is authorized. Since the holder of the account is the only person 
who stands to gain anything, inputting the correct PIN number is a 
sufficient identity check. The management system for insurance 
premiums which is the subject of this invention can verify that the 
person who reports the amount of exercise is authorized. But if 
the insurance company cannot verify sufficiently that this person 
is not someone pretending to be the insured, this system cannot 
fulfill the requirement of verifying that the insured himself is 
making an effort to maintain his health. In other words, the ex- 
isting verification technique does not fulfill the two necessary 
conditions, i.e., it must verify both that this is an authorized 
person and that this is not someone other than the insured. 

2) If swung by hand, a pedometer will count the movements as 
steps even though the person is not walking or jogging. There is 
no way to verify that the pedometer is actually attached to the 
person 1 s body, or whether it is attached to anything. Let us as- 
sume that an insured is paying a monthly premium of $700, which 
comes to an annual outlay of $8,400, If he does a specified amount 
of exercise, he will receive a discount of 10%, or $840 per year. 
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It is not inconceivable that the insured will use the pedometer im- 
properly and actuate it simply to log the required number of steps. 
He might, for example, attach the pedometer for a calculated period 
of time to something that revolves mechanically. Obviously, this 
sort of spurious exercise record should not be counted as an effort 
on the part of the insured to maintain his health. Yet the exist- 
ing technique entails no actual means to verify that the pedometer 
is attached to the insured's body. 



Summary of the Invention 

As is discussed above, since regular exercise is linked to 
maintaining or improving physical and mental health, preventing 
illness and promoting a healthy lifestyle, some insurance companies 
have a policy of granting benefits such as discounts to insureds 
who exercise. This invention is a system designed to be used by 
such companies. More specifically, the invention concerns an exer- 
cise monitor which is a means to accurately record exercise results 
consisting of the amount of exercise the insured himself has per- 
formed . 

The exercise data to be recorded include at least the type of 
exercise, intensity level and length of time. These data will be 
expressed in terms of type and amount of exercise. Some examples 
of types of exercise are jumping, walking, jogging and jumping rope. 
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Some examples of intensity level are height of jumping, speed of 
walking or jogging and r.p.m. of the rope for jumping rope. Length 
of time is simply how long one exercises. It can be expressed by 
logging the starting and finishing times. The amount of exercise 
can be expressed using the intensity and length of time. For walk- 
ing, it would be proportional to distance walked or number of steps 
taken . 

The "exercise results" are the record of exercise performed. 
For example, the results might be all the daily exercise data re- 
corded in the last thirty days. 

To verify reliably that the exercise record represents exer- 
cise performed by the insured himself, it is necessary to verify at 
least that the person monitored is in fact the insured. In fact, 
as can be seen in the following chart, to assure ourselves that the 
exercise record is accurate we need to verify two points— that this 
person is actually the insured, and that the exercise monitor is 
actually attached to his body. 



8 





Verifying 


Verifying that the 


exercise monitor is actually at- 




that the 


tached to the person 




person is 








actually 








the in- 








sured 






Means 


Use of 


Have a third 


Data will not be generated if ex- 




identity 


party verify 


ercise monitor is not attached to 




checking 


that the exer- 


correct person. Verify that data 




techniques 


cise monitor is 


are being generated. 






attached to the 








insured. 


1. Verify that there are data. 




1, Answers 




Since data will not be detected 




to ques- 


1. Rely on staff 


unless monitor is attached to 




tions 


at fitness cen- 


correct person, display on moni- 




which only 


ter to verify 


tor represents correct use. (Ex- 




insured 


that the person 


ample: Attendant may feel moni- 




can an- 


exercising is 


tor. If vibrating, it is re- 




swer; in- 


wearing the ex- 


cording . ) 




put of PIN 


ercise monitor. 






number . 




2. Verify detection of specific 








signal which is only emitted when 








person is exercising while wear- 




2 . Input 


2. Rely on 


ing monitor. (Example: signal 




of physi- 


trainer to ver- 


emitted when person is walking) 




cal data 


i fv thflt* dpt son 






which can 


is wearing moni- 


3. Verify physiological data with 




identify 


tor . 


characteristics which cannot be 




an indi- 




input into monitor unless it is 




vidual , 




worn while the person is exercis- 




such as 




ing. (Example: a pulse wave 




finger- 




with a component highly corre- 




print or 




lated with the rhythm of sounds 




voice- 




indicating that the person is ex- 




print . 




ercising . ) 








4. Verify acceleration data with 








characteristics which cannot be 








input into monitor unless it is 








worn while the person is exercis- 








ing. (Example: capturing an ac- 








celeration signal with a compo- 








nent highly correlated with the 








rhythm of sounds indicating that 








the person is exercising.) 



9 



How 
Means 
Should 
be Com- 
bined 



Tech- 
nology 
needed 
to com- 
bine 
means 



1. The identity of the person and the fact that the 
monitor is attached to his body should be verified 
at nearly the same time. (This will prevent the in- 
sured from (1) transferring his monitor to a friend 
after his identity is confirmed and having the 
friend submits to the check of whether the monitor 
is attached, or (2) having his friend submit to the 
check of whether the monitor is attached and then 
transferring the monitor to himself for the identity 
check. ) 

2 . The monitor should be watched from the time the per- 
son 1 s identity is checked until the check that he is 
wearing the monitor is completed to make sure that 
he does not remove it. 

3 . The monitor should be watched from the time the per- 
son is checked to make sure he is wearing it until 
his identity check has been completed to make sure 
that he does not remove it. 

Techniques to detect removal of monitor: 
Continuously detect cardiac pulse. If pulse is not de- 
tected for a given period of time, conclude that moni- 
tor has been removed. Monitor will store last time 
pulse was detected and calculate difference between 
this time and the next time pulse is detected. If 
elapsed time exceeds a given value, conclude that moni- 
tor has been removed. 



The first objective of this invention is to provide an exer- 
cise monitor which could generate data needed to calculate an in- 
surance premium which would be beneficial and fair to both the in- 
surance company and the insured. To enable the exercise monitor to 
record accurately only exercise performed by the insured himself, 
this invention has been given the two basic functions described in 
the above chart, namely the function of verifying the person's 
identity and the function of verifying that he is actually wearing 
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the monitor; and it has been given the additional function which 
allows the user to self-report his encrypted data. 

Insurance companies might provide their clients with inexpen- 
sive exercise monitors like pedometers and encourage them to exer- 
cise. If a client wore the pedometer and it recorded results that 
met given criteria, the insurance company could conclude that he 
had made an effort to maintain his health and would give him a dis- 
count on his insurance premium. In this way the insurance company 
could provide an inducement for the insured to adopt a more healthy 
and active lifestyle. 

The second objective of this invention is to provide a busi- 
ness system to control insurance premiums. If it uses an exercise 
monitor as described above to accurately record an insured 1 s ef- 
forts to maintain his own health, the insurance company will be 
able to reduce his premium. This advantage will enable the company 
to assume a dominant position with respect to its competitors. To 
achieve the two objectives stated above, this invention is given 
the following two preferred embodiments. 

The first preferred embodiment of this invention consists of 
an exercise monitor and a management system for insurance premiums 
in which the identity of the person and the fact that he is wearing 
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the exercise monitor are verified by one subsystem and the exercise 
record data are captured and evaluated by another subsystem, both 
of which are connected to the monitor via a communication circuit. 
The first step in the process is for the insurance company to con- 
tact by telephone or other means of communication the person who 
has purchased a health or life insurance policy and verify his 
identity. Shortly after or shortly before this contact, exercise 
record data recorded by an exercise monitor (for example, a pedome- 
ter) worn by the insured are taken and analyzed to verify that he 
has actually worn the monitor. If the exercise indicated on the 
monitor at the time the person's identity is verified (for example, 
light jumping or walking some number of steps) can be verified by 
subsequent processing to be exercise performed by the person at 
that time, we may conclude that the person was wearing the monitor. 
The exercise record data from the exercise monitor are analyzed to 
determine whether the person has performed sufficient exercise to 
meet the requirements to have his premium discounted. If the re- 
corded exercise does meet the requirements, the identity check and 
the monitor check are judged to be complete and the appropriate 
steps are taken to discount the premium. The insured may also be 
given guidance by a trainer regarding his exercise routine based on 
the exercise record data captured by his monitor. 
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The second preferred embodiment of this invention is an exer- 
cise monitor which has a built-in program to check the person's 
identity, check whether he is actually wearing the monitor, and 
evaluate his exercise; and a management system for insurance premi- 
ums employing that monitor. In the second embodiment, the person's 
identity and the fact that he is wearing the monitor are verified 
according to the following steps. 

1) The exercise monitor keeps track of the person's exercise 
and stores the data in a non-volatile memory. (Examples: Number 
of steps, list of dates and times steps were counted) 

2) The exercise monitor detects when the person is resting af- 
ter exercising. (Example: When there is a period of time that the 
acceleration is below a threshold value which continues until the 
next time the threshold is reached.) 

3) When the exercise monitor has determined that the person is 
resting after exercising, it will issue a request that the person 
verify his identity. (This may be done at every rest period or 
without notice.) He will then be required to input data to verify 
his identity. Data that he might be asked to input include PIN 
number, date of birth, or answers to simple questions, such as fa- 
vorite color, blood type, animal in Chinese zodiac, astrological 
sign, or place of birth. By having the monitor verify the person 1 s 
identity immediately after verifying that he has just finished ex- 
ercising, we can detect that the person wearing the monitor is 
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really the insured. The identity check is not requested while the 
person is exercising so that his exercise will not be interrupted. 
A device may also be used which can verify identity using physio- 
logical data. In this case, since the check can be done without 
disturbing the person while he is exercising, the identity check 
need not be limited to the period immediately after the person ex- 
ercises. To increase the accuracy of the check to see if the per- 
son is wearing the monitor, the monitor can request that the person 
perform a simple action (e.g., jump or walk a few steps). If the 
action is detected immediately after the request is made, we can 
conclude that the person is wearing the monitor. If a number of 
different questions are stored in the monitor and selected randomly, 
and the check of whether the person is wearing the monitor is per- 
formed shortly before or after the time his identity is checked, 
the insurance company can increase the probability that the person 
wearing the monitor is actually the insured and not a friend help- 
ing him out. At the same time, as was discussed above, we can ver- 
ify that he is actually wearing the monitor. 

4) The exercise monitor compares the exercise record data 
which it has recorded with a given criterion. If the data fulfill 
this requirement, it uses the monitor owner's ID to generate a PIN 
number and display it on the screen. Along with the PIN number, 
the monitor displays the insurance company's toll-free phone number. 
It may also explain to the insured that if he calls the toll-free 



14 



number and reports this PIN number, his premium will be discounted. 
The information could also be sent via the internet using a data 
input section on the insurance company's home page. This would al- 
low the insured to send the insurance company accurate and reliable 
exercise data . 

The second embodiment of the exercise monitor does not need to 
have a transmitting function built into the monitor, and it does 
not require the user to exercise in a place with a phone or inter- 
net connection. The processing is done off line, so the user has 
greater freedom to exercise when and where he chooses than he would 
with the first embodiment. This design also reduces the cost and 
size of the monitor. 



Brief description of the drawings 

Figure 1 illustrates an overview of the exercise monitor ac- 
cording to the first preferred embodiment of this invention. 

Figure 2 illustrates an overview of the exercise monitor ac- 
cording to the second preferred embodiment of this invention. 

The Figure 3 illustrates the hardware configuration of the ex- 
ercise monitor according to the second preferred embodiment of this 
invention. 
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Figure 4 illustrates the partial software flowchart of main 
routine of the exercise monitor according to this invention. 

Figure 5 illustrates the partial software flowchart of main 
routine of the exercise monitor according to this invention. 

Figure 6 illustrates the partial software flowchart of main 
routine of the exercise monitor according to this invention. 

Figure 7 illustrates the partial subroutine SUB 200, the proc- 
essing to verify that the monitor is being worn, according to this 
invention . 

Figure 8 illustrates the partial subroutine SUB 200, the proc- 
essing to verify that the monitor is being worn, according to this 
invention . 

Figure 9 illustrates the partial subroutine SUB 200, the proc- 
essing to verify that the monitor is being worn, according to this 
invention . 

Figure 10 illustrates the partial subroutine SUB 200, the 
processing to verify that the monitor is being worn, according to 
this invention. 

Figure 11 illustrates the partial subroutine SUB 200, the 
processing to verify that the monitor is being worn, according to 
this invention. 

Figure 12 illustrates the partial subroutine SUB 300, the 
processing to verify the user's identity, according to this inven- 
tion . 
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Figure 13 illustrates the partial subroutine SUB 300, the 
processing to verify the user's identity, according to this inven- 
tion . 

Figure 14 illustrates subroutine SUB 400, which concerns re- 
cording the type, amount and time of exercise. 

Figure 15 illustrate insurance premium management system 500, 
which is related to the third preferred embodiment of this inven- 
tion. 

Figure 16 illustrates insurance premium management system 600, 
which is related to the fourth preferred embodiment of this inven- 
tion . 

Figure 17 illustrates the health target control system, which 
is a prior art, and was recently published as Japanese Patent Pub- 
lication 2000-276525. 



Detailed Description of the Invention 

Figure 1 shows the exterior of exercise monitor 1, the first 
preferred embodiment of this invention. 

This type of exercise monitor is fastened by fastening mecha- 
nism 60, a belt or the like, to the upper or lower portion of the 
person's thigh. It records what type of exercise he is doing and 
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measures its amount and duration, storing all the data along with 
the date and time. The exercise monitor may be combined with a 
portable phone so that the data detected by the monitor may be sent 
to a remote location or data such as commands or questions may be 
sent from a remote location and displayed on the monitor. Data 
which are measured and recorded could also be processed and dis- 
played on display 20. Sensor terminals 10, which measure physio- 
logical data, and/or an acceleration sensor (not pictured) , are 
built into the exercise monitor. The monitor also contains a pro- 
gram which uses the sensor data to determine when the person is ex- 
ercising and calculate the amount of exercise (e.g., in number of 
steps) he is getting, which is the reason for the monitor. 

The exercise monitor has the capability of verifying that the 
person who is wearing it is actually the insured and not someone 
impersonating him (the identity-checking function) . This prevents 
the insured from illegally procuring favorable treatment such as a 
rate discount by having someone else wear the monitor while exer- 
cising. The insurance company (or the health guidance company) 
calls the person on telephone 100 without notice and asks him ques- 
tions about himself which must have specific answers. Questions 
that he might be asked in an identity check include PIN number or 
date of birth, or questions that the insured would be able to an- 



18 



swer easily without thinking, such as favorite color, blood type, 
animal in Chinese zodiac, astrological sign, or place of birth. 

If the insured's identity can be verified from his answers to 
these questions, the monitor checks whether he is actually wearing 
the monitor or has rigged it in some way to clock spurious exercise 
(function of verifying that the person is wearing the monitor) . 
For example, a representative of the insurance company (or health 
guidance company) contacts the insured by phone and asks him to 
jump a few times, and the insured does so. If the exercise monitor 
is part of a cell phone, the entire exercise routine can be di- 
rected and monitored in real time. 

Next, the insurance company's (or health guidance company's) 
computer takes in the data collected by the exercise monitor and 
transmitted by phone. When the exercise data representing the 
jumping which has just occurred are output and the insured's ID has 
been detected, those data are processed as representing exercise 
performed while the insured is wearing the monitor. If the exer- 
cise monitor is not connected by a circuit to the computer at the 
insurance company (or health guidance company) , that computer will 
be unable to evaluate the exercise data recorded by the exercise 
monitor. In this case, the exercise monitor can compare the exer- 
cise data it has recorded with an appropriate standard. If the 
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data meet the standard, encrypted data generated by using the ID of 
the person using the exercise monitor can be displayed on screen 20. 
Since the data are encrypted, it is not possible for the person to 
report fraudulent data to the insurance company (self -reporting 
function of encrypted data) . When this exercise record is trans- 
mitted to the insurance company, if the exercise recorded is suffi- 
cient to meet a given standard, the insured receives the service he 
has been promised, such as having his premium discounted. 

In this device, in addition to the features described above, 
operating unit 30 executes the input shown in the next flow chart. 
Also, the device and the person can exchange data via speaker 40 
and microphone 50, or either can exchange data with the insurance 
company by phone. Alternatively, the insured can use the internet 
to access a data reception page on a given home page set up by the 
insurance company and report the aforesaid encrypted data. 

Figure 2 shows the external appearance of exercise monitor 2, 
the second preferred embodiment of this invention. 

In the second embodiment, in contrast to the first, the per- 
son's identity and the fact that he is wearing the monitor are not 
confirmed by calling the insurance company on the telephone, but by 
exercise monitor 2 itself. First the person wearing the device is 
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monitored and the data are recorded. Then, immediately after the 
monitor detects that exercise has ceased, an internal program runs 
which instructs the person to perform some light exercise (for ex- 
ample, a given number of jumps) to check whether the monitor is be- 
ing worn. The exercise data for the given number of jumps are col- 
lected by sensor terminal 10 for physiological data or by an accel- 
eration sensor. The monitor determines whether a characteristic 
signal pattern has been detected which is generated during exercise 
due to the skeletal or muscle structure of the human body, and from 
this result it determines whether the exercise monitor is being 
worn by a human being. In other words, the monitor can check 
whether someone is wearing it by comparing the current data with 
previously recorded reference data (function to check that monitor 
is being worn) . 

Next, an internal program which receives data input for the 
identity check (for example, fingerprint input or voice input) runs 
to verify the insured's identity (identity check function). The 
items covered by the identity check are the same as in the first 
embodiment; however, fingerprint sensor 80 may be used and the re- 
sults compared with reference data stored in the device or specific 
buttons on operating unit 30 may be used to input a PIN number. An 
example of a small fingerprint sensor which may be used is Sony's 
model CXA3271GE. Alternatively, microphone 50 may be used to input 
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the person's voice, and the monitor can then determine whether the 
voiceprints match. In any case, unlike in the first embodiment, 
the monitor itself checks whether the person is wearing the monitor 
and who that person is, and both checks are performed offline. 

When the monitor has completed the checks of whether the per- 
son is wearing the monitor and who the person is, and the exercise 
record data which have been recorded meet the given standard, just 
as in the first embodiment encrypted data generated using the in- 
sured's ID are displayed on screen 20. The insured uses the phone 
or a data reception page on a given home page set up by the insur- 
ance company to report the aforesaid encrypted data (function of 
self-reporting encrypted data) . Encryption of the data prevents 
fraudulent reporting just as in the first embodiment. 



Hardware 

We shall next explain the hardware configuration of exercise 
monitor 1 or 2 of this invention, with reference to Figure 3. The 
main internal components are CPU 100, ROM 110, EPROM 120, RAM 130, 
acceleration sensor 140, A/D converter 150, D/A converter 160 and 
unit 170 to measure physiological data. The main external compo- 
nents are sensor terminal 10 to measure physiological data, which 



22 



was mentioned above; display unit 20; operating unit 30; speaker 
40; microphone 50; and fingerprint sensor 80, which is used in the 
second embodiment. All components are connected by bus line 105. 

All programs related to the exercise monitor are stored in ROM 
110. The ROM also contains basic wave form patterns for different 
types of exercise, threshold values for determinations and control 
parameters. EE PROM 120 contains the ID number of the exercise 
monitor; the name and PIN number of the monitor's owner; the ques- 
tions used to verify the user's identity and the correct answers to 
them; and physiological data needed to verify the user's identity, 
such as their fingerprint pattern or voiceprint pattern. These 
data are entered into the EEPROM before the monitor is given to the 
insured based on data supplied directly by that person. RAM 130 is 
a memory area used as a work area for required software processing. 
Display unit 20 consists of an LCD which displays messages to the 
user who is operating the device. This display is often generated 
synchronously with the sound from speaker 40. Unit 170 to measure 
physiological data could, for example, be used to obtain the wave- 
form of an ECG or the cardiac rhythm. Operating unit 30 consists 
of a set of buttons which are used to switch modes or enter answers 
to questions, input a PIN number, and so on. Fingerprint sensor 80 
is used to input the user's fingerprint into the monitor. 
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Software Flow Chart 

We shall next explain a flow chart for the software operations 
executed in an exercise monitor related to this invention, with 
reference to Figures 4 through 14. Since many aspects of exercise 
monitors 1 and 2 in the aforesaid first and second embodiments 
overlap, we shall discuss only the second embodiment in this sec- 
tion . 

Figures 4 through 6 outline the main routine. Figures 7 
through 11 illustrate subroutine SUB 200, the processing to verify 
that the monitor is being worn. Figures 12 and 13 illustrate sub- 
routine SUB 300, the processing to verify the user's identity. 
Figure 14 illustrates subroutine SUB 400, which concerns recording 
the type, amount and time of exercise. 

Verifying That the Monitor is Being Worn and Verifying Identity 

First, as can be seen in Figure 4, when exercise monitor 1 or 
2 is fastened to the specified part of the insured's body, a series 
of initialization processes is executed in Step 01. In Step 02, 
the monitor checks whether the "mode" button on operating unit 30 
is set to "record mode." Record mode is the mode in which data are 
recorded to verify the user's identity and evaluate his exercise. 
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If the monitor is in record mode, specific recording processing is 
executed in subroutine SUB 100. When this is completed, the moni- 
tor is set to "run mode" in Step 03. Again the monitor executes 
Step 02 and finds that it is now in run mode rather than record 
mode . 

We proceed to Step 04, where the monitor checks whether the 
processing has been completed to verify that it is actually at- 
tached to someone's body (processing to verify that the monitor is 
being worn) . This processing confirms that the exercise monitor is 
really attached to the person's body and is not being operated by 
some improper means. If the "monitor is being worn" flag is "0", 
the verification processing is not yet completed; if it is "1", the 
processing has been completed. If the flag goes to "2", this indi- 
cates that the processing is completed and the monitor is not being 
worn. Normally, when record mode has just been completed, the 
monitor will determine that the check of whether the person is 
wearing it has not yet been completed. It will then execute sub- 
routine SUB 200, to be discussed shortly, to check whether the 
monitor is actually attached to a person. In Step 05, the "monitor 
being worn" flag is set according to the result of the check, and 
the time of the check t 0 is set. We again proceed through Steps 02 
and 04, and check in Step 06 whether the identity verification has 
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been completed. If the check of whether the monitor is being worn 
is still not completed, we go again to SUB 200. 

If the check of whether the monitor is being worn has been 
completed in Step 04, we proceed to Step 06 and check whether the 
person wearing the monitor is actually the insured and not someone 
not authorized to wear the monitor (processing to verify identity) . 
This processing to verify the insured's identity is done to certify 
that this is indeed the insured and not someone to whom he has im- 
properly lent his exercise monitor. If in Step 06 it is determined 
that the person's identity has not yet been verified, we go to sub- 
routine SUB 300, which will be discussed shortly, and the specified 
processing is executed to verify the person 1 s identity. In Step 07, 
the identity check flag is set according to the result of this 
processing, and the time ti of the check is set. We then return to 
Step 02. An identity check flag of "0" indicates that the verifi- 
cation processing is not yet completed; "1" indicates that the 
processing has been completed and the insured's identity has been 
confirmed; and IT 2 ,T indicates that the processing has been completed 
and someone other than the insured is wearing the monitor. 

If in Step 06 it is determined that the identity check proc- 
essing has been completed, we go to Step 08, where it is determined 
whether times t 0 and ti, the times when the identity check was com- 
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pleted (when the flag went to "1") and when the check of whether 
the monitor was being worn was completed (when the flag went to 
"1") are sufficiently close to each other. If they are, the moni- 
tor concludes that the monitor was not removed after the identity 
check. In Step 10, the "worn by insured" flag is set, and since 
the processing to verify that the monitor is being worn and that 
the correct person is wearing it has been completed, we proceed to 
the processing to record and evaluate the exercise shown in Figure 
5. If times t 0 and ti are not sufficiently close to each other in 

CI Step 08, the monitor concludes that it is being used improperly. 

S the flags are reset in Step 09, and we return to Step 02. 

ft The Processing to Record and Evaluate the Exercise 

Q 

I?:; In the processing to record and evaluate the exercise which is 

r " shown in Figure 5, the amount of exercise is recorded for the per- 
son for whom two conditions have been verified: the condition that 
he is wearing the monitor on his body, which was verified in the 
aforesaid SUB 200, and the condition that he is actually the in- 
sured, which was verified in SUB 300. 

In Step 11, data are recorded from an acceleration sensor 
which is built into the monitor. By "acceleration sensor," we mean 
merely a sensor which detects acceleration associated with the 
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movement of the body. For example, if we were to choose a pedome- 
ter, the pendulum-type sensor used in the prior art would be suit- 
able. If the person was planning to use the various machines in a 
health club, a sensor or counter to detect the characteristic move- 
ment of various parts of his body could be used. Since various 
kinds of sensors and counters are already available, we shall not 
discuss them in detail at this point. Since the point of the in- 
vention is to measure an amount of exercise effective in maintain- 
ing the health of an insured person so that his insurance company 
can confer benefits on him, the sensor must be a measurement device 
capable of measuring such an amount of exercise. The invention is 
not necessarily limited to a single measurement device; a number of 
such devices could as well be used. 



In Steps 12 and 13, read-in mode is used to read in the 
physiological data and store them. By "physiological data" are 
meant such data as heart rate and blood pressure. An example of a 
sensor for physiological data is the sensor terminal 10 shown in 
Figure 2; however, the physiological data are not limited to this 
type only, but include any data detected by any of various physio- 
logical sensors, including a microphone within a cuff and a laser 
sensor stuck to the skin. In Step 14, the monitor checks whether 
the data have been recorded for a period which is long enough to 
evaluate them. If the time period is too short, we return to Step 
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11. If it is adequate, we go to Step 15, where, based on the data 
recorded in Steps 11 and 13, the monitor determines whether the 
user is now exercising or has temporarily stopped. If it deter- 
mines that the person is exercising, it records in Step 16 the type 
and amount of exercise and its duration. We then return to Step 02 
and continuously repeat the check to verify that the monitor is be- 
ing worn, the identity check, and the steps to record the exercise 
until the monitor determines in Step 15 that the person has stopped 
exercising. If it determines in Step 15 that the person has 
stopped, but the pause is within a given duration, the monitor will 
conclude that the person has taken a short rest, and will return to 
Step 11 and resume recording the exercise. In Step 17, if the 
pause continues for a long time, the monitor will conclude that the 
person has finished exercising and is now resting. In Step 18, the 
monitor will display the exercise values up to the current time, as 
well as the current menu, on screen 20, which is shown in Figure 2. 



In Figure 6, the monitor determines whether the user has, 
while he is resting, selected a new menu, or whether he has com- 
pletely stopped exercising, and goes into its final processing. In 
Step 19, the monitor reads in data input via the keys of operating 
unit 30. If a new menu is selected in Step 20, the processing en- 
tailed by the menu is activated in Step 21, and we go back to Step 
02, from which the processing continues. If a new menu is not se- 
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lected in Step 20, in Steps 22 and 23 a warning is sounded a given 
number of times, the essential data are stored in a non-volatile 
memory and the power supply is disconnected. In Step 23 , if the 
warning has not yet been output the specified number of times, we 
return to Step 02 and processing resumes. 

With this processing flow, the amount of exercise performed in 
each session is computed and recorded (as exercise record data) , 
and the exercise result data are accumulated in the exercise moni- 
tor. Although it is not shown in the flow chart, these exercise 
result data are displayed on screen 20, as was mentioned earlier. 
They may be transmitted by phone to the insurance company's data 
base after a specified period of time has elapsed, or they may be 
sent to a specified home page via the internet. In this case, 
since the person reporting the data is the person who stands to 
benefit from them, the insurance company would develop its own en- 
coding scheme to safeguard the accuracy of the data. The aforesaid 
exercise result data would then appear on the screen in encoded 
form so that the person calling in the data would be unable to al- 
ter them. The insurance company decodes these encoded exercise re- 
sult data and uses the exercise record to confer benefits such as a 
premium discount on its insured. 
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Processing to Verify that the Monitor is Being Worn 

We shall now present, with reference to Figures 7 through 11, 
a detailed explanation of the processing to verify that the monitor 
is being worn, which constitutes SUB 200 in Figure 4. By "process- 
ing to verify that the monitor is being worn" is meant processing 
to insure that the insured who stands to benefit is actually wear- 
ing the exercise monitor rather than fraudulently creating exercise 
record data by some dishonest means. 

For the exercise monitor related to this invention, we dis- 
close the following five techniques to verify that the monitor is 
actually being worn. The invention, of course, is not limited to 
these techniques, which are meant only to serve as examples. 

(Bl) Giving an instruction which only the person wearing the 
monitor can detect. For example, the exercise monitor could vi- 
brate and instruct the wearer to perform a given exercise. For 
this the monitor need not be in contact with the person's skin. 

(B2) Recognizing a characteristic signal which can be de- 
tected only when the person is exercising while wearing the monitor. 
Precise analysis of an acceleration signal detected by the monitor 
can yield a waveform which is definitive for an exercise performed 
while the person is wearing the monitor (e.g., the waveform pro- 
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duced when the person is walking) . For this the monitor need not 
be in contact with the person's skin. 

(B3) Verifying a physiological rhythm which is synchronized 
with a rhythm generated by the exercise monitor. This requires 
that the monitor detect a physiological signal and that it be in 
contact with the person's skin. We shall discuss a means to verify 
a synchronous rhythm shortly. 

(B4) Verifying acceleration signals which are synchronized 
with a rhythm generated by the exercise monitor. We shall discuss 
a means to verify this synchronization shortly. This method does 
not require that the monitor be in contact with the person's skin. 

(B5) Continuously detecting a physiological signal. This 
method requires that the monitor be in contact with the person's 
skin. We shall next explain, in order, the five aforesaid methods 
to verify that the monitor is being worn. 

In Figure 7, when SUB 200, the processing to verify that the 
monitor is being worn, begins, a number is read out in Step 201 to 
designate which method is to be used for the verification. This 
number will be one of Bl through B5 in the flow chart. It is set 
by the insurance company before the exercise monitor is distributed. 
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It is not specifically necessary to set one method only; more than 
one method could be used for verification. Method Bl is shown in 
Figure 7, B2 in Figure 8, B3 in Figure 9, B4 in Figure 10 and B5 in 
Figure 11. 

Method Bl 

If Method Bl is recognized in Step 210 in Figure 7 , the exer- 
cise monitor outputs a vibration to indicate that the wearer should 
perform a specific exercise. When the wearer feels this vibration, 
he performs an exercise determined ahead of time. For example, if 
the monitor is a pedometer, he might take ten steps, pause five 
seconds, and take another ten steps. In Step 212, an acceleration 
sensor detects this exercise, and the data are read and recorded. 
If the person is not actually wearing the monitor, he will be un- 
able to produce this sort of conditioned response; so the test can 
be used to verify that he is wearing the monitor. In Step 213, the 
monitor determines whether a specified period of time has elapsed. 
If it has, in Step 214 it records the type of exercise, the amount 
and the time. In Step 215, the monitor determines whether the ex- 
ercise which the wearer was instructed to perform has been detected. 
In Steps 216 and 217, it establishes either that the exercise was 
detected or that it was not. The monitor then leaves the verifica- 
tion routine and proceeds to Step 05. The specified exercise may 
be determined beforehand, as described above, or a different re- 
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quest may be displayed on screen 20 each time verification is at- 
tempted. 

Method B2 

When Method B2 is recognized in Step 220 of Figure 8, the 
processing will be the same as in Method Bl from Step 221 through 
Step 226, with the exception of Step 224. This method differs from 
Bl in regard to Step 224, where instead of detecting a specified 
number of steps registered on a pedometer, as described in Bl, the 
monitor detects a more precise characteristic of the waveform pro- 
duced by walking. Checking the waveform characteristic of walking 
enables a more rigorous verification. 

Method B3 

When Method B3 is recognized in Step 230 of Figure 9, the 
monitor requests that the wearer perform some exercise which is 
synchronized with a specified rhythm that it generates. The moni- 
tor can then detect whether the person is wearing it by checking 
the rhythm of the physical data it records. In Step 231, the proc- 
ess of outputting an exercise rhythm is initiated. The person must 
exercise at the same rhythm. In Step 232, a sensor in the monitor 
detects and records the physiological signal. If data have been 
recorded for a sufficient period of time in Step 233, the corre- 
sponding values in the acoustic rhythm pattern guiding the exercise 
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and the physiological signal pattern are obtained in Step 234. In 
Step 235, the monitor determines whether the correspondence value 
exceeds a given value. In Steps 236 and 237, if the correspondence 
exceeds the given value, the monitor concludes that the person is 
wearing it, and if it does not exceed the value, it concludes that 
the person is not wearing it. This concludes the verification 
processing. The "synchronized physiological signal rhythm" might, 
for example, be the person 1 s heart rhythm. The determination made 
in the aforesaid Steps 234 and 235, as to whether the acoustic 
rhythm to guide the exercise can be correlated with the waveform 
which is detected, will be discussed in detail shortly, as will the 
details of the flow, which comprises SUB 400. 

Method B4 

When Method B4 is recognized in Step 240 of Figure 10, the 
monitor determines whether or not the person is wearing it in a 
similar fashion to that of Method B3, in Steps 241 through 247. 
However, instead of the physiological sensor used in Method B3, 
this method uses an acceleration sensor. The exercise monitor 
bases its judgement on an acceleration signal which is synchronized 
with a rhythm it generates. It might, for example, base its deter- 
mination on a speed of walking which is synchronized with a rhythm 
indicated by a pedometer. All other steps are identical to those 
of Method B3 . Like Steps 234 and 235 in Figure 9, the determina- 
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tion made in the aforesaid Steps 244 and 245, as to whether the 
acoustic rhythm to guide the exercise can be correlated with the 
waveform which is detected, will be discussed in detail shortly, as 
will the details of the flow, which comprises SUB 400. 

Method B5 

Figure 11 illustrates the process of verifying whether the 
person is wearing the monitor using Method B5 . This method entails 
continuously monitoring data such as the cardiac pulse. If the 
pulse is not detected for a period which exceeds a specified dura- 
tion, the monitor concludes that the person has taken it off. It 
records in the memory the last time the cardiac pulse was detected 
and calculates the difference between that time and the next time 
the pulse is detected. If the result exceeds a given value, the 
monitor concludes that it has been removed. In Step 251, the last 
time the physiological data were detected is called tm. In Step 
252, the monitor determines whether the difference between the cur- 
rent time and tm is within a given range. If it is, the monitor 
concludes that it has not been removed. In Step 253, the verifica- 
tion processing is completed, the monitor verifies that the person 
is still wearing it, and it sets the "monitor being worn" flag to 
"1". If the time difference is outside the given range, the veri- 
fication processing ends with Step 254, the monitor cannot verify 
that it is being worn, and it sets the "monitor being worn" flag to 
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"2". In Step 255 the physiological data, here the cardiac pulse 
data, are read and recorded. If the physiological data have been 
detected in Step 256, the time they were last detected is changed 
to the current time in Step 257. The verification processing is 
completed, and we proceed to Step 05 in Figure 4. In Step 04 it 
was determined that the verification process had been completed. 
In Step 06 the person's identity is checked, and we go back to Step 
13 in Figure 5 to read and record the physiological data. The 
monitor repeatedly checks as described above to determine whether 
it has been taken of f . 

Verifying the Person's Identity 

We shall next explain, with reference to Figures 12 and 13, 
the details of the processing to verify the person's identity which 
constitute SUB 300, shown in Figure 4. "Verifying the person's 
identity" refers to determining whether the person who is wearing 
the exercise monitor is actually the insured who is the beneficiary 
or some other person. In relation to the exercise monitor accord- 
ing to this invention, two methods are given to verify identity; 
however, the invention should not be construed as limited to these 
methods only, which are meant merely as examples. 

(Al) Analyzing an answer to a question. This method entails 
determining whether this is the correct person by whether his an- 
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swers to questions such as requests for his PIN number, address or 
name are correct. This method does not require the detection of 
physiological data, so it does not require that a sensor terminal 
be attached to the person 1 s skin. However, it does require a key- 
board or some other means to input data. 

(A2) Using physiological data which identify an individual. 
The monitor obtains a fingerprint, voiceprint, ECG waveform or car- 
diac pulse and verifies the person's identity by how well these 
data match a previously recorded set. For an ECG waveform or a 
cardiac pulse, a sensor must be attached to the person 1 s skin. 

In Figure 12, when SUB 300, the processing to verify the per- 
son's identity, begins, in Step 301 the monitor reads out a number 
to designate which method will be used to verify identity. This 
number, which is either Al or A2 in this flow chart, is set by the 
insurance company before the exercise monitor is shipped. There is, 
of course, no need specifically to set one of the methods. Both 
may be used to verify identity, or one of a number of methods may 
be selected randomly to prevent anyone from impersonating the in- 
sured and passing the verification dishonestly. Method Al is shown 
in Figure 12 and Method A2 in Figure 13. 

Method Al 
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In Figure 12, when SUB 300, the subroutine to verify the per- 
son's identity, begins, a number is read out in Step 301 to desig- 
nate which method will be used to verify the person's identity. 
This number, which is either Al or A2 in this flow chart, is set by 
the insurance company before the exercise monitor is shipped. We 
have already explained that there is no specific need to set one of 
the methods, and that a number of methods may be used to verify 
identity. Method Al is shown in Figure 12 and Method A2 in Figure 
13. 

In Step 302 of Figure 12, when Method Al is recognized, the 
exercise monitor displays a question such as "What is your PIN num- 
ber?" on screen 20 and outputs a warning sound via speaker 40. The 
user enters his answer via the keyboard in Steps 303 and 305. The 
key input is read in Step 304 and compared with previously recorded 
reference data in Step 306. If in Step 307 the monitor determines 
that this is not the correct person, it sets a flag to indicate 
this in Step 309. If it determines that this is the correct person, 
it sets a flag to indicate this in Step 310. If in Step 305 a 
specified time elapses, a time out is declared, and a "verification 
incomplete" flag is set in Step 308. We then leave SUB 300 and 
proceed to Step 07 . 

Method A2 
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If Method Al is not selected in Step 302 of Figure 12, we move 
to Step 311 in Figure 13 and verify the person's identity using 
Method A2 . In Step 311 of Method A2 , the screen displays informa- 
tion needed to collect physiological data to check the person's 
identity. At the same time, a warning sound is emitted. After the 
physiological data are entered in Step 312, they are read in Step 
314. By "physiological data" are meant a fingerprint pattern, a 
cardiac pulse pattern, an ECG pulse pattern or the like. In Step 
315 the monitor determines how well the recorded pattern fits a 
reference pattern. In Steps 316 and 317 flags representing the re- 
sults of this determination are set. We then leave SUB 300 and 
proceed to Step 07 . 

Recording the Type, Amount and Time of Exercise 

The acoustic pattern which guides the exercise is compared to 
the recorded physiological pattern described in Steps 234 and 235 
of Figure 9 or the signal pattern output by the acceleration sensor, 
which is described in Steps 244 and 245 of Figure 10. The correla- 
tion between these two patterns is determined as follows. 

The acoustic rhythm of the sounds to guide the exercise, which 
are repeated throughout period T, is called timing waveform f(t). 
The timing waveform of the physiological data obtained by the ac- 
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celeration sensor or the physical measurement unit is called g(t). 
The correlation function O(t) is then obtained by the following 
formula . 

T/2 

0(t)= Jf(t+r)g(r)dr 
-T/2 

O(t) not only represents the goodness of fit between timing wave- 
form f(t) and the form of g(t), but is a function influenced by the 
amplitude as well; it must therefore be normalized. If we call the 
energy of f (t) fO and the energy of g(t) gO, we obtain normalized 
results by the following formulas. 
T/2 

f0= Jf(r)f(r)dr 

-T/2 

T/2 

gO - Jg (r) g (t) dr 
-T/2 

O(t) represents the normalized cross-correlation function of the 

normalized function. If we represent this as TTQ (t) , we get the 
following formula . 
¥ (t) = <B(t)/sqrt(fO x gO) 

where sqrt (x) is the function which obtains the square root of x. 
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The maximum value of lljj (t) for the time interval [-T/2, T/2] is 
called Ifljmax . 

We compare IPJmax with the threshold value TH and determine whether 
it is over the threshold value. 

UUmax is over TH: The two patterns are similar. 
HUmax is under TH: The two patterns are not similar. 

SUB 400 to Record the Type, Amount and Time of Exercise 

Using the aforesaid logic as our premise, we shall now explain 
the actual processing flow in SUB 400 with reference to Figure 14. 
In Step 401 the data record g(t) representing the output of the ac- 
celeration sensor is read out of the memory. In Step 402, the N 
types of fundamental waveform models fml (t) , fm2 (t) ... fmn(t) 
for the various types of exercise are read out. In Steps 404, 405 
and 406, the logic discussed above is used to obtain the normalized 
cross-correlation function for g (t) and the kth fundamental wave- 
form model fmk (t) . The maximum value of this function we shall 
call Mk. We apply the same processing to each exercise model, ob- 
taining Ml through Mn for the models. In Step 407, we determine 
the type of exercise from the number of the fundamental waveform 
model in Ml through Mn which has the greatest value. In Step 408, 
the maximum value of the cross-correlation function for the funda- 
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mental waveform model with the number obtained as described above 
and g(t) is recorded as the intensity of the exercise. Finally, in 
Step 409, the starting and ending points of the time interval re- 
corded as g(t) are recorded so as to correspond with the type and 
amount of exercise. In this way we can obtain exercise data which 
have been compared to every type of exercise rhythm. 

System to Manage Insurance Premiums 

In this section we shall disclose a business system which em- 
ploys the aforesaid exercise monitor. In such a system, when the 
insurance company or subcontracting health guidance company recog- 
nizes the fact that the insured has exercised regularly for a fixed 
period of time and so is making an effort to maintain his own 
health, they will discount his premium by a given amount. 

Figure 15 shows premium management system 500, which is re- 
lated to the third preferred embodiment of this invention. In this 
embodiment, when insurance company 510 and policyholder 530 enter 
into a contract, the insurance company stipulates that if the poli- 
cyholder exercises sufficiently, his premium will be discounted. 
Insurance company 510 gives policyholder 530 an exercise monitor 1 
or 2 according to this invention to keep track of how much he exer- 
cises. The policyholder gives the insurance company the telephone 
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number of the location where he usually works out (for example, a 
fitness center) or the number of the cell phone he will carry when 
working out. Every time the policyholder exercises to maintain his 
fitness, he wears the exercise monitor. And each time he exercises, 
the type and amount of exercise will be stored in storage device M 
in his monitor . 

Insurance company 510 or its agent, health guidance company 
520, will telephone the policyholder and, via the internet, collect 
the exercise data recorded by his exercise monitor, which has veri- 
fied his identity and the fact that he is actually wearing the 
monitor. As is shown in the drawing, policyholder 530 may himself 
phone in his data, for example by sending them to the file M2 for 
exercise records provided on the homepage of health guidance com- 
pany 520; or he may report them orally by phone. As has been dis- 
cussed, the exercise monitor according to this invention has a num- 
ber of functions, including verifying the person's identity, veri- 
fying that he is actually wearing the monitor and encoding the data 
he is to report, which eliminate the possibility that false results 
will be reported. 

Once health guidance company 520, to which insured 530 has 
sent his ID and exercise data, has finished inspecting the ID and 
exercise record, it sends them on via the internet to exercise re- 
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cord file M3 at the insurance company. Based on the data in file 
M3, insurance company 510 applies a discount of AG to the premium Y 
which was stored for the insured in premium data file M4 before he 
reported his exercise record, so that his future premium will be 
discounted by that amount. The medical expenses G of a policy- 
holder who continues exercising regularly for a period of time will 
with high probability decrease to G 1 . It is therefore possible to 
discount his premium Y by AG. To encourage insured 530 to use the 
exercise monitor, insurance company 510 can pay him an incentive 
bonus M, In this case, if the decrease in medical expenses (G - 
G T ) is larger than (AG + M) , the insurance company can actually use 
this system to increase its profit. Health guidance company 520 
can evaluate whether insured 530 is exercising appropriately and 
instruct him in appropriate exercises. It will then receive a pro- 
motion fee M from the insurance company as its service fee. In- 
sured 530 receives a premium discount of AG from the insurance com- 
pany and is instructed in his exercise routine by the health guid- 
ance company so as to maintain his fitness. 

Figure 16 shows insurance premium management system 600 , which 
is related to the fourth preferred embodiment of this invention. 
This is a business model for the development of the third embodi- 
ment. Employer 550 pays the insurance company which covers the 
policyholder (i.e., his employee) a premium X which consists of the 
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employee's share Y and the employer's share Z. Insurance company 
510 pays medical expenses G to a hospital or pharmacy when the in- 
sured is ill. To reduce the amount it must pay as medical expenses 
G, insurance company 510 gives policyholder 530 an exercise monitor 
1 or 2 according to this invention. When the insured exercises and 
becomes fit, his medical expenses G will decrease, and the insur- 
ance company will not have to pay as much. The insurance company 
can also pay a promotion fee M to health guidance company 520 to 
^ encourage insured 530 to exercise. In this case, we would expect 
%j that medical expenses G will be reduced by AG. If M is less than 
O AG, the insurance company will make a profit. 

^ Health promotion company 520 subsidizes a portion (L) of in- 

IjL" sured 530 ! s health club membership fee in return for access to his 

'SB!? 

in** 

fi exercise record data. As a result, the employee can belong to a 
health club at a lower out-of-pocket cost. We would predict that 
this would cause health club memberships to increase. Even if the 
insured does not join a health club but prefers to exercise on his 
own, he can still wear the exercise monitor, and the fact that he 
is performing sufficient exercise can be understood from the data 
collected by the monitor. IF exercise promotion company 520 is 
monitoring the insured ? s exercise regime, it will pay him a promo- 
tion fee N. In this case, if the total of company 520 T s management 
expenses, promotion fee N and membership fee subsidy L is less than 
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promotion fee M, its income, it will turn a profit. Exercise pro- 
motion company 520 can increase its profit by selling the exercise 
monitor to the insured and by servicing used monitors. 

Effects of the Invention 

As was discussed above, this exercise monitor does not simply 
record exercise data as prior art monitors did. Its identity 
verification function not only certifies, by requiring the user to 
input a PIN number or the like, that this is the insured, but also 
determines with certainty that this is not someone impersonating 
the insured. This function prevents a person other than the in- 
sured from padding the exercise record data. Because the user's 
identity is checked immediately after he stops exercising, only ex- 
ercise performed by the insured will be recorded. This device 
would allow interested parties to construct an effective system to 
manage health insurance premiums, in which the insurance company or 
a health guidance company which it subcontracts with would provide 
the insured with this exercise monitor to encourage him to exercise 
voluntarily. If the insured records a certain amount of exercise 
in a given period of time, the insurance company acknowledges that 
he is making an effort to keep fit, and it discounts his premium. 
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What is claimed is: 



Exercise Monitor 

1. An exercise monitor, comprising: 

a motion sensor adapted to measure an exercise motion of a 

user; 

identity check means for verifying said user's identity, said 
identity check means operable in an active mode; and 

recording means for recording an output data of said motion 
sensor; 

wherein said recording means records said exercise motion as 
valid data only after said identity check means has verified said 
user's identity when said identity check means is operated in said 
active mode . 



2. An exercise monitor according to claim 1, wherein said 
verifying said user's identity is processed without notice. 



3. An exercise monitor according to claim 1, wherein said 
verifying said user's identity is processed by said user in said 
exercise motion right after a predetermined length of time has 
passed. 
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4. An exercise monitor according to claim 1, wherein said 
verifying said user's identity is processed by asking said user one 
or more specific questions and allowing said user to input one or 
more correct answers for said one or more specific questions. 

5. An exercise monitor according to claim 4, wherein said 
one or more questions are selected out of a plurality of questions 
previously registered in said exercise monitor. 

6. An exercise monitor according to claim 4, wherein said 
verifying said user's identity is processed by asking said user one 
or more specific questions without notice. 

7. An exercise monitor according to claim 4, wherein said 
one or more specific questions are delivered by telephone or said 
questions are stored in said exercise monitor in advance. 

8. An exercise monitor according to claim 4, wherein said 
one or more correct answers for said one or more specific questions 
are personal key words which only said user knows. 

9. An exercise monitor according to claim 1, wherein said 
verifying said user's identity is processed by physiological data 
of said user. 
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10. An exercise 
physiological data is 
of said user. 



monitor according to claim 9, wherein said 
a fingerprint pattern or voiceprint pattern 



11. An exercise monitor according to claim 1, further com- 
prising, in addition to said identity check means, a wearing check 
means to verify that said monitor is actually being worn by said 
user; 

wherein said recording means records said exercise motion as 
valid data only after said wearing check means has verified that 
said monitor is actually being worn by said user. 



12. An exercise monitor according to claim 11 7 wherein said 
wearing check means is activated based on an instruction which sai 
user can not obtain unless said user is actually wearing said exer 
cise monitor adjacent to the skin of said user. 



13. An exercise monitor according to claim 12, wherein said 
instruction which said user can not obtain unless said user is ac- 
tually wearing said exercise monitor adjacent to the body of said 
user, is to vibrate a portion of the skin of said user. 
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14. An exercise monitor according to claim 11, wherein said 
wearing check means is processed based on a characteristic signal 
which can be detected only when said user is exercising while wear- 
ing said exercise monitor. 

15. An exercise monitor according to claim 14, wherein said 
exercise monitor is provided with a step counter equipped with said 
motion sensor to detect a walking motion, and said motion sensor 
can verify said wearing by a motion characteristic of walking. 

16. An exercise monitor according to claim 11, wherein 
said wearing check means is actually being worn by said user, is 
processed if there is a high correlation between physiological data 
of said user which is obtained only if said monitor is actually be- 
ing worn by said user, and an output of said exercise monitor. 

17. An exercise monitor according to claim 16, wherein said 
physiological data of said user is a synchronized exercise rhythm 
generated by said exercise monitor and obtained only if said moni- 
tor is actually being worn by said user, and said verifying is 
processed if there is a high correlation between said synchronized 
exercise rhythm and a pulse wave data of said user which is said 
output of said exercise monitor. 
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18. An exercise monitor according to claim 11, wherein 
said wearing check means is processed if there is a high correla- 
tion between acceleration data of said user which is obtained only 
if said monitor is actually being worn by said user, and an output 
of said motion sensor. 

19. An exercise monitor according to claim 18, wherein said 
acceleration data of said user is a synchronized exercise rhythm 
generated by said exercise monitor and obtained only if said moni- 
tor is actually being worn by said user, and said verifying is 
processed if there is a high correlation between said synchronized 
exercise rhythm and an acceleration of said user's body which is 
related to said output of said motion sensor. 

Insurance Premium Management System 

20. An insurance premium management system which provides a 
predetermined amount of benefits to an insured person who is recog 
nized by an insurance company as an insured person who has achieve 
a predetermined amount of exercise, and thereby reduces medical ex 
penses of said insured person, by using an exercise monitor to rec 
ognize that said insured person has achieved said predetermined 
amount of exercise, said exercise monitor; comprising: 

a motion sensor adapted to measure an exercise motion of a 

user; 
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identity check means for verifying said user's identity, said 
identity check means operable in an active mode; and 

recording means for recording an output data of said motion 
sensor; 

wherein said recording means records said exercise motion as a 
valid data only after said identity check means has verified said 
user's identity when said identity check means is operated in said 
active mode. 

M 21. An insurance premium management system according to claim 

Hi 20, wherein said predetermined amount of benefits includes a pre- 
is* mium discount. 

w I 
'A 

m 

p 22. An insurance premium management system according to claim 

O 20, wherein said exercise monitor further comprises, in addition to 
said identity check means, a wearing check means to verify that 
said monitor is actually being worn by said user, and said re- 
cording means records said exercise motion as a valid data only af- 
ter said wearing check means has verified that said monitor is ac- 
tually being worn by said user. 

23. An insurance premium management system according to claim 
21, wherein said premium discount is lower than an actual reduction 
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of 
sai 



said medical expens 
d exercise monitor. 



e 



s for said insurance company by usage of 



24. An insurance premium management system according to claim 
22, wherein data of an achieved amount of exercise is provided to 
said insurance company by a health guidance company, and said 
health guidance company generates an information value, said health 
guidance company is paid for within a saving value range for said 
insurance company, said saving value range is defined by a differ- 
ence between an amount of premium discounts and an actual reduction 
of said medical expenses. 

25. An insurance premium management system according to claim 
22, wherein said health guidance company further provides a health- 
care guidance for said insured person. 



